@adatechnology/meta-whatsapp-module 0.2.0-rc.7 → 0.2.0-rc.9

package/dist/migrations/0005_message_moderation.sql

@@ -0,0 +1,3 @@
+ALTER TABLE "meta_whatsapp"."messages" ADD COLUMN "moderation_flagged" boolean;--> statement-breakpoint
+ALTER TABLE "meta_whatsapp"."messages" ADD COLUMN "moderation_terms" jsonb;--> statement-breakpoint
+CREATE INDEX "idx_messages_moderation_flagged" ON "meta_whatsapp"."messages" ("company_id","created_at") WHERE "moderation_flagged";

package/dist/migrations/meta/_journal.json

@@ -36,6 +36,13 @@
       "when": 1785023108000,
       "tag": "0004_widen_message_type",
       "breakpoints": true
+    },
+    {
+      "idx": 5,
+      "version": "7",
+      "when": 1785176501657,
+      "tag": "0005_message_moderation",
+      "breakpoints": true
     }
   ]
-}
+}

package/dist/testing/index.cjs

@@ -0,0 +1,72 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/testing/index.ts
+var testing_exports = {};
+__export(testing_exports, {
+  PREVIEW_AUDIO_MIME_TYPE: () => import_testing2.PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER: () => import_testing2.PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID: () => import_testing2.PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID: () => import_testing2.PREVIEW_WABA_ID,
+  buildInboundAudioPayload: () => import_testing2.buildInboundAudioPayload,
+  buildInboundInteractivePayload: () => import_testing2.buildInboundInteractivePayload,
+  buildInboundTextPayload: () => import_testing2.buildInboundTextPayload,
+  serializeWebhookPayload: () => import_testing2.serializeWebhookPayload,
+  signWebhookPayload: () => signWebhookPayload,
+  toSignedWebhookRequest: () => toSignedWebhookRequest
+});
+module.exports = __toCommonJS(testing_exports);
+var import_testing2 = require("@adatechnology/meta-whatsapp-contracts/testing");
+
+// src/testing/inboundPayloads.ts
+var import_node_crypto = require("crypto");
+var import_testing = require("@adatechnology/meta-whatsapp-contracts/testing");
+function signWebhookPayload(params) {
+  return `sha256=${(0, import_node_crypto.createHmac)("sha256", params.appSecret).update(params.rawBody).digest("hex")}`;
+}
+__name(signWebhookPayload, "signWebhookPayload");
+function toSignedWebhookRequest(params) {
+  const rawBody = (0, import_testing.serializeWebhookPayload)(params.payload);
+  return {
+    rawBody,
+    headers: {
+      "content-type": "application/json",
+      "x-hub-signature-256": signWebhookPayload({
+        rawBody,
+        appSecret: params.appSecret
+      })
+    }
+  };
+}
+__name(toSignedWebhookRequest, "toSignedWebhookRequest");
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID,
+  buildInboundAudioPayload,
+  buildInboundInteractivePayload,
+  buildInboundTextPayload,
+  serializeWebhookPayload,
+  signWebhookPayload,
+  toSignedWebhookRequest
+});
+//# sourceMappingURL=index.cjs.map

package/dist/testing/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/testing/index.ts","../../src/testing/inboundPayloads.ts"],"sourcesContent":["/**\n * Export separado (`@adatechnology/meta-whatsapp-module/testing`) para que utilitário de\n * desenvolvimento não entre no grafo de import de quem só consome o módulo em produção.\n *\n * Os builders são reexportados dos contratos por conveniência de quem já depende do módulo\n * (scripts de CLI, `make test-msg`): quem monta payload no navegador deve importar direto de\n * `@adatechnology/meta-whatsapp-contracts/testing`, que não toca em `node:crypto`.\n */\n\nexport {\n  buildInboundTextPayload,\n  buildInboundInteractivePayload,\n  buildInboundAudioPayload,\n  serializeWebhookPayload,\n  PREVIEW_PHONE_NUMBER_ID,\n  PREVIEW_WABA_ID,\n  PREVIEW_DISPLAY_PHONE_NUMBER,\n  PREVIEW_AUDIO_MIME_TYPE,\n} from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport type {\n  BuildInboundTextPayloadParams,\n  BuildInboundInteractivePayloadParams,\n  BuildInboundAudioPayloadParams,\n  InteractiveReplyOption,\n} from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport { signWebhookPayload, toSignedWebhookRequest } from './inboundPayloads'\nexport type { SignWebhookPayloadParams, SignedWebhookRequest, ToSignedWebhookRequestParams } from './inboundPayloads'\n","/**\n * Assinatura de payload de preview no runtime do servidor. Os builders vivem em\n * `@adatechnology/meta-whatsapp-contracts/testing` porque precisam rodar também no navegador;\n * aqui fica só o que depende de `node:crypto`.\n *\n * Não existe bypass de assinatura em lugar nenhum: o preview bate na mesma rota, com a mesma\n * validação de HMAC de staging e produção. O que muda é apenas quem assina — a Meta lá, o app\n * secret local aqui.\n */\n\nimport { createHmac } from 'node:crypto'\nimport type { WhatsAppWebhookPayload } from '@adatechnology/meta-whatsapp-contracts'\nimport { serializeWebhookPayload } from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport type SignWebhookPayloadParams = {\n  readonly rawBody: string\n  readonly appSecret: string\n}\n\nexport function signWebhookPayload(params: SignWebhookPayloadParams): string {\n  return `sha256=${createHmac('sha256', params.appSecret).update(params.rawBody).digest('hex')}`\n}\n\nexport type SignedWebhookRequest = {\n  readonly rawBody: string\n  readonly headers: Readonly<Record<string, string>>\n}\n\nexport type ToSignedWebhookRequestParams = {\n  readonly payload: WhatsAppWebhookPayload\n  readonly appSecret: string\n}\n\n/**\n * Devolve o corpo JÁ serializado junto da assinatura, porque a validação assina os bytes exatos:\n * quem serializar de novo antes de enviar (ou deixar o cliente HTTP serializar o objeto) muda\n * espaçamento/ordem e derruba a assinatura. Enviar `rawBody` como está é o contrato.\n */\nexport function toSignedWebhookRequest(params: ToSignedWebhookRequestParams): SignedWebhookRequest {\n  const rawBody = serializeWebhookPayload(params.payload)\n\n  return {\n    rawBody,\n    headers: {\n      'content-type': 'application/json',\n      'x-hub-signature-256': signWebhookPayload({ rawBody, appSecret: params.appSecret }),\n    },\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;;;;AASA,IAAAA,kBASO;;;ACRP,yBAA2B;AAE3B,qBAAwC;AAOjC,SAASC,mBAAmBC,QAAgC;AACjE,SAAO,cAAUC,+BAAW,UAAUD,OAAOE,SAAS,EAAEC,OAAOH,OAAOI,OAAO,EAAEC,OAAO,KAAA,CAAA;AACxF;AAFgBN;AAmBT,SAASO,uBAAuBN,QAAoC;AACzE,QAAMI,cAAUG,wCAAwBP,OAAOQ,OAAO;AAEtD,SAAO;IACLJ;IACAK,SAAS;MACP,gBAAgB;MAChB,uBAAuBV,mBAAmB;QAAEK;QAASF,WAAWF,OAAOE;MAAU,CAAA;IACnF;EACF;AACF;AAVgBI;","names":["import_testing","signWebhookPayload","params","createHmac","appSecret","update","rawBody","digest","toSignedWebhookRequest","serializeWebhookPayload","payload","headers"]}

package/dist/testing/index.d.cts

@@ -0,0 +1,34 @@
+export { BuildInboundAudioPayloadParams, BuildInboundInteractivePayloadParams, BuildInboundTextPayloadParams, InteractiveReplyOption, PREVIEW_AUDIO_MIME_TYPE, PREVIEW_DISPLAY_PHONE_NUMBER, PREVIEW_PHONE_NUMBER_ID, PREVIEW_WABA_ID, buildInboundAudioPayload, buildInboundInteractivePayload, buildInboundTextPayload, serializeWebhookPayload } from '@adatechnology/meta-whatsapp-contracts/testing';
+import { WhatsAppWebhookPayload } from '@adatechnology/meta-whatsapp-contracts';
+
+/**
+ * Assinatura de payload de preview no runtime do servidor. Os builders vivem em
+ * `@adatechnology/meta-whatsapp-contracts/testing` porque precisam rodar também no navegador;
+ * aqui fica só o que depende de `node:crypto`.
+ *
+ * Não existe bypass de assinatura em lugar nenhum: o preview bate na mesma rota, com a mesma
+ * validação de HMAC de staging e produção. O que muda é apenas quem assina — a Meta lá, o app
+ * secret local aqui.
+ */
+
+type SignWebhookPayloadParams = {
+    readonly rawBody: string;
+    readonly appSecret: string;
+};
+declare function signWebhookPayload(params: SignWebhookPayloadParams): string;
+type SignedWebhookRequest = {
+    readonly rawBody: string;
+    readonly headers: Readonly<Record<string, string>>;
+};
+type ToSignedWebhookRequestParams = {
+    readonly payload: WhatsAppWebhookPayload;
+    readonly appSecret: string;
+};
+/**
+ * Devolve o corpo JÁ serializado junto da assinatura, porque a validação assina os bytes exatos:
+ * quem serializar de novo antes de enviar (ou deixar o cliente HTTP serializar o objeto) muda
+ * espaçamento/ordem e derruba a assinatura. Enviar `rawBody` como está é o contrato.
+ */
+declare function toSignedWebhookRequest(params: ToSignedWebhookRequestParams): SignedWebhookRequest;
+
+export { type SignWebhookPayloadParams, type SignedWebhookRequest, type ToSignedWebhookRequestParams, signWebhookPayload, toSignedWebhookRequest };

package/dist/testing/index.d.ts

@@ -0,0 +1,34 @@
+export { BuildInboundAudioPayloadParams, BuildInboundInteractivePayloadParams, BuildInboundTextPayloadParams, InteractiveReplyOption, PREVIEW_AUDIO_MIME_TYPE, PREVIEW_DISPLAY_PHONE_NUMBER, PREVIEW_PHONE_NUMBER_ID, PREVIEW_WABA_ID, buildInboundAudioPayload, buildInboundInteractivePayload, buildInboundTextPayload, serializeWebhookPayload } from '@adatechnology/meta-whatsapp-contracts/testing';
+import { WhatsAppWebhookPayload } from '@adatechnology/meta-whatsapp-contracts';
+
+/**
+ * Assinatura de payload de preview no runtime do servidor. Os builders vivem em
+ * `@adatechnology/meta-whatsapp-contracts/testing` porque precisam rodar também no navegador;
+ * aqui fica só o que depende de `node:crypto`.
+ *
+ * Não existe bypass de assinatura em lugar nenhum: o preview bate na mesma rota, com a mesma
+ * validação de HMAC de staging e produção. O que muda é apenas quem assina — a Meta lá, o app
+ * secret local aqui.
+ */
+
+type SignWebhookPayloadParams = {
+    readonly rawBody: string;
+    readonly appSecret: string;
+};
+declare function signWebhookPayload(params: SignWebhookPayloadParams): string;
+type SignedWebhookRequest = {
+    readonly rawBody: string;
+    readonly headers: Readonly<Record<string, string>>;
+};
+type ToSignedWebhookRequestParams = {
+    readonly payload: WhatsAppWebhookPayload;
+    readonly appSecret: string;
+};
+/**
+ * Devolve o corpo JÁ serializado junto da assinatura, porque a validação assina os bytes exatos:
+ * quem serializar de novo antes de enviar (ou deixar o cliente HTTP serializar o objeto) muda
+ * espaçamento/ordem e derruba a assinatura. Enviar `rawBody` como está é o contrato.
+ */
+declare function toSignedWebhookRequest(params: ToSignedWebhookRequestParams): SignedWebhookRequest;
+
+export { type SignWebhookPayloadParams, type SignedWebhookRequest, type ToSignedWebhookRequestParams, signWebhookPayload, toSignedWebhookRequest };

package/dist/testing/index.js

@@ -0,0 +1,40 @@
+var __defProp = Object.defineProperty;
+var __name = (target, value) => __defProp(target, "name", { value, configurable: true });
+
+// src/testing/index.ts
+import { buildInboundTextPayload, buildInboundInteractivePayload, buildInboundAudioPayload, serializeWebhookPayload as serializeWebhookPayload2, PREVIEW_PHONE_NUMBER_ID, PREVIEW_WABA_ID, PREVIEW_DISPLAY_PHONE_NUMBER, PREVIEW_AUDIO_MIME_TYPE } from "@adatechnology/meta-whatsapp-contracts/testing";
+
+// src/testing/inboundPayloads.ts
+import { createHmac } from "crypto";
+import { serializeWebhookPayload } from "@adatechnology/meta-whatsapp-contracts/testing";
+function signWebhookPayload(params) {
+  return `sha256=${createHmac("sha256", params.appSecret).update(params.rawBody).digest("hex")}`;
+}
+__name(signWebhookPayload, "signWebhookPayload");
+function toSignedWebhookRequest(params) {
+  const rawBody = serializeWebhookPayload(params.payload);
+  return {
+    rawBody,
+    headers: {
+      "content-type": "application/json",
+      "x-hub-signature-256": signWebhookPayload({
+        rawBody,
+        appSecret: params.appSecret
+      })
+    }
+  };
+}
+__name(toSignedWebhookRequest, "toSignedWebhookRequest");
+export {
+  PREVIEW_AUDIO_MIME_TYPE,
+  PREVIEW_DISPLAY_PHONE_NUMBER,
+  PREVIEW_PHONE_NUMBER_ID,
+  PREVIEW_WABA_ID,
+  buildInboundAudioPayload,
+  buildInboundInteractivePayload,
+  buildInboundTextPayload,
+  serializeWebhookPayload2 as serializeWebhookPayload,
+  signWebhookPayload,
+  toSignedWebhookRequest
+};
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/testing/index.ts","../../src/testing/inboundPayloads.ts"],"sourcesContent":["/**\n * Export separado (`@adatechnology/meta-whatsapp-module/testing`) para que utilitário de\n * desenvolvimento não entre no grafo de import de quem só consome o módulo em produção.\n *\n * Os builders são reexportados dos contratos por conveniência de quem já depende do módulo\n * (scripts de CLI, `make test-msg`): quem monta payload no navegador deve importar direto de\n * `@adatechnology/meta-whatsapp-contracts/testing`, que não toca em `node:crypto`.\n */\n\nexport {\n  buildInboundTextPayload,\n  buildInboundInteractivePayload,\n  buildInboundAudioPayload,\n  serializeWebhookPayload,\n  PREVIEW_PHONE_NUMBER_ID,\n  PREVIEW_WABA_ID,\n  PREVIEW_DISPLAY_PHONE_NUMBER,\n  PREVIEW_AUDIO_MIME_TYPE,\n} from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport type {\n  BuildInboundTextPayloadParams,\n  BuildInboundInteractivePayloadParams,\n  BuildInboundAudioPayloadParams,\n  InteractiveReplyOption,\n} from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport { signWebhookPayload, toSignedWebhookRequest } from './inboundPayloads'\nexport type { SignWebhookPayloadParams, SignedWebhookRequest, ToSignedWebhookRequestParams } from './inboundPayloads'\n","/**\n * Assinatura de payload de preview no runtime do servidor. Os builders vivem em\n * `@adatechnology/meta-whatsapp-contracts/testing` porque precisam rodar também no navegador;\n * aqui fica só o que depende de `node:crypto`.\n *\n * Não existe bypass de assinatura em lugar nenhum: o preview bate na mesma rota, com a mesma\n * validação de HMAC de staging e produção. O que muda é apenas quem assina — a Meta lá, o app\n * secret local aqui.\n */\n\nimport { createHmac } from 'node:crypto'\nimport type { WhatsAppWebhookPayload } from '@adatechnology/meta-whatsapp-contracts'\nimport { serializeWebhookPayload } from '@adatechnology/meta-whatsapp-contracts/testing'\n\nexport type SignWebhookPayloadParams = {\n  readonly rawBody: string\n  readonly appSecret: string\n}\n\nexport function signWebhookPayload(params: SignWebhookPayloadParams): string {\n  return `sha256=${createHmac('sha256', params.appSecret).update(params.rawBody).digest('hex')}`\n}\n\nexport type SignedWebhookRequest = {\n  readonly rawBody: string\n  readonly headers: Readonly<Record<string, string>>\n}\n\nexport type ToSignedWebhookRequestParams = {\n  readonly payload: WhatsAppWebhookPayload\n  readonly appSecret: string\n}\n\n/**\n * Devolve o corpo JÁ serializado junto da assinatura, porque a validação assina os bytes exatos:\n * quem serializar de novo antes de enviar (ou deixar o cliente HTTP serializar o objeto) muda\n * espaçamento/ordem e derruba a assinatura. Enviar `rawBody` como está é o contrato.\n */\nexport function toSignedWebhookRequest(params: ToSignedWebhookRequestParams): SignedWebhookRequest {\n  const rawBody = serializeWebhookPayload(params.payload)\n\n  return {\n    rawBody,\n    headers: {\n      'content-type': 'application/json',\n      'x-hub-signature-256': signWebhookPayload({ rawBody, appSecret: params.appSecret }),\n    },\n  }\n}\n"],"mappings":";;;;AASA,SACEA,yBACAC,gCACAC,0BACAC,2BAAAA,0BACAC,yBACAC,iBACAC,8BACAC,+BACK;;;ACRP,SAASC,kBAAkB;AAE3B,SAASC,+BAA+B;AAOjC,SAASC,mBAAmBC,QAAgC;AACjE,SAAO,UAAUC,WAAW,UAAUD,OAAOE,SAAS,EAAEC,OAAOH,OAAOI,OAAO,EAAEC,OAAO,KAAA,CAAA;AACxF;AAFgBN;AAmBT,SAASO,uBAAuBN,QAAoC;AACzE,QAAMI,UAAUG,wBAAwBP,OAAOQ,OAAO;AAEtD,SAAO;IACLJ;IACAK,SAAS;MACP,gBAAgB;MAChB,uBAAuBV,mBAAmB;QAAEK;QAASF,WAAWF,OAAOE;MAAU,CAAA;IACnF;EACF;AACF;AAVgBI;","names":["buildInboundTextPayload","buildInboundInteractivePayload","buildInboundAudioPayload","serializeWebhookPayload","PREVIEW_PHONE_NUMBER_ID","PREVIEW_WABA_ID","PREVIEW_DISPLAY_PHONE_NUMBER","PREVIEW_AUDIO_MIME_TYPE","createHmac","serializeWebhookPayload","signWebhookPayload","params","createHmac","appSecret","update","rawBody","digest","toSignedWebhookRequest","serializeWebhookPayload","payload","headers"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adatechnology/meta-whatsapp-module",
-  "version": "0.2.0-rc.7",
+  "version": "0.2.0-rc.9",
   "description": "Stateful conversation/flow module for WhatsApp — schema, migrations, repositories, and use-cases behind pluggable ports (Fase 3-5 of the meta-whatsapp trio)",
   "publishConfig": {
     "access": "public"
@@ -8,13 +8,25 @@
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js",
+      "require": "./dist/testing/index.cjs"
+    }
+  },
   "files": [
     "dist"
   ],
   "dependencies": {
     "@adatechnology/meta-graph-core": "0.2.0-rc.1",
-    "@adatechnology/meta-whatsapp-provider": "0.2.0-rc.2",
-    "@adatechnology/meta-whatsapp-contracts": "0.2.0-rc.1"
+    "@adatechnology/meta-whatsapp-contracts": "0.2.0-rc.3",
+    "@adatechnology/meta-whatsapp-provider": "0.2.0-rc.2"
   },
   "devDependencies": {
     "@types/bun": "1.3.14",